$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft File: djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json) Hash identifier: 9LZ7TgZmCD6i5kXbIc1ncHQQXDs+fVojC/WMvP9H8ak= Subject key identifier: C5:DC:9E:7A:B3:44:0A:9D:FB:7D:C6:D4:27:6A:91:06:74:E8:55:94 Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1 Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft Manifest number: 45 Signing time: Sun 11 May 2025 06:08:28 +0000 Manifest this update: Sun 11 May 2025 06:08:27 +0000 Manifest next update: Sun 18 May 2025 06:08:27 +0000 Files and hashes: 1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: NaoFfvK7YKW0KCmssmNL9lh6vfluz36j8ZEzYhQyp1I=) 2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: +gnNwknF2udgbeSCQKAvlJ+Kl8XnvhGtCbKQkcxQ+I8=) 3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: ZZi0Gn/OMvF3e89O2m6QByhZ3253TVeiYiuccUZGQj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1 Validity Not Before: May 11 06:08:27 2025 GMT Not After : May 18 06:08:27 2025 GMT Subject: CN=68203edc-f99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:56:63:c0:f6:c0:01:e4:d4:3c:ab:f3:44: 8a:35:85:93:65:b4:30:e6:43:c6:8b:be:c1:e9:6e: 38:a0:f7:d8:5b:a5:5c:b5:29:7e:b4:9b:51:3a:e1: ab:95:38:54:42:5f:43:f5:81:d2:e1:7d:d5:56:85: ec:79:0c:dd:e8:7c:f7:5e:c2:c1:5f:0b:d4:62:cc: 5d:86:54:d2:39:40:69:2b:74:e5:a3:0c:eb:89:9b: ec:3d:85:eb:25:e6:22:45:6c:e3:b2:e6:2b:65:6a: 2e:2c:1e:cd:2e:d8:7a:9c:1d:eb:9b:99:e2:cc:f0: c7:8d:a0:14:6f:e0:26:d7:1e:1d:b9:57:33:9c:15: 51:24:7d:f4:21:f9:e1:4b:0d:e0:80:84:5f:39:f0: 5a:66:96:02:79:71:35:9a:44:46:60:68:c8:3b:54: b8:8c:b5:4d:b5:c1:72:14:a1:77:72:67:4e:99:85: 25:65:98:90:25:95:d2:83:94:5e:58:aa:b4:2f:de: 1a:4c:0e:43:e1:b5:14:a2:89:f8:cb:94:8c:ce:a7: b3:fd:07:a9:6f:37:7f:48:18:b5:b1:95:c1:60:c2: 73:4a:c9:08:3f:ab:75:a5:29:54:4d:5e:16:1c:1b: 1b:8a:22:d3:57:d3:1e:96:8c:69:ec:31:09:cd:d8: 29:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DC:9E:7A:B3:44:0A:9D:FB:7D:C6:D4:27:6A:91:06:74:E8:55:94 X509v3 Authority Key Identifier: keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:a8:c8:4c:2c:a6:81:4d:1e:d3:5a:13:7e:4d:29:43:3e:c8: 0c:18:22:4c:64:1e:d4:76:7d:62:bd:17:d7:1e:5c:67:6a:78: 9c:fd:66:68:f5:06:b4:01:68:e1:11:a7:68:6b:6c:03:79:f8: c9:1b:5d:80:39:bb:b1:64:40:49:23:6c:2d:70:57:ac:a7:1f: 95:61:dc:a2:0a:f8:16:1d:d6:0d:85:d2:77:9a:73:61:17:ef: cc:84:dd:28:5c:a6:8e:14:20:fb:70:4e:fd:15:73:95:75:08: da:8f:58:c6:00:2c:9f:cb:f7:e0:41:91:60:d6:f7:3f:a9:60: a2:5a:17:f7:4a:a4:4e:19:86:f2:c8:bb:da:7c:f2:a6:3f:27: 99:b3:00:4d:6e:7a:5b:c3:69:41:34:44:8e:06:20:be:da:0c: 86:23:fa:43:00:09:fc:ad:16:82:e4:10:49:9a:94:fa:16:d8: 7f:1f:9e:5b:50:33:e0:b6:fe:79:06:fe:23:65:39:f4:78:cd: 9b:0e:b1:18:41:07:b5:2e:54:aa:d9:7c:a8:7a:8a:ed:15:0c: 76:52:96:da:13:1e:b1:7e:74:fa:16:55:7d:26:3b:be:b9:b3: 8c:b6:57:37:26:91:77:7e:0e:9b:ac:e6:3a:d7:97:14:b8:31: 4b:81:50:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MjNEOTExMC8GA1UEBRMoNzYzNEFEODY2NTZFRkU2QzQ1RTRFRjk5OEY5NEI2OTdB QzM5QkVGMTAeFw0yNTA1MTEwNjA4MjdaFw0yNTA1MTgwNjA4MjdaMBgxFjAUBgNV BAMTDTY4MjAzZWRjLWY5OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDv1ZjwPbAAeTUPKvzRIo1hZNltDDmQ8aLvsHpbjig99hbpVy1KX60m1E64auV OFRCX0P1gdLhfdVWhex5DN3ofPdewsFfC9RizF2GVNI5QGkrdOWjDOuJm+w9hesl 5iJFbOOy5itlai4sHs0u2HqcHeubmeLM8MeNoBRv4CbXHh25VzOcFVEkffQh+eFL DeCAhF858FpmlgJ5cTWaREZgaMg7VLiMtU21wXIUoXdyZ06ZhSVlmJAlldKDlF5Y qrQv3hpMDkPhtRSiifjLlIzOp7P9B6lvN39IGLWxlcFgwnNKyQg/q3WlKVRNXhYc GxuKItNX0x6WjGnsMQnN2CljAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxdyeerNE Cp37fcbUJ2qRBnToVZQwHwYDVR0jBBgwFoAUdjSthmVu/mxF5O+Zj5S2l6w5vvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyM0Q5LzgzNjg2QUNDQzlE MTExRUY5NzVCREM0QkM0RjlBRTAyL2RqU3RobVZ1X214RjVPLVpqNVMybDZ3NXZ2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGpTdGhtVnVfbXhGNU8tWmo1UzJsNnc1dnZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy M0Q5LzgzNjg2QUNDQzlEMTExRUY5NzVCREM0QkM0RjlBRTAyL2RqU3RobVZ1X214 RjVPLVpqNVMybDZ3NXZ2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMGoyEwspoFNHtNaE35NKUM+yAwYIkxkHtR2fWK9F9ceXGdqeJz9Zmj1 BrQBaOERp2hrbAN5+MkbXYA5u7FkQEkjbC1wV6ynH5Vh3KIK+BYd1g2F0neac2EX 78yE3Shcpo4UIPtwTv0Vc5V1CNqPWMYALJ/L9+BBkWDW9z+pYKJaF/dKpE4ZhvLI u9p88qY/J5mzAE1uelvDaUE0RI4GIL7aDIYj+kMACfytFoLkEEmalPoW2H8fnltQ M+C2/nkG/iNlOfR4zZsOsRhBB7UuVKrZfKh6iu0VDHZSltoTHrF+dPoWVX0mO765 s4y2VzcmkXd+Dpus5jrXlxS4MUuBUPs= -----END CERTIFICATE-----Generated at Sun May 11 17:09:30 2025 by rpki-client